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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS 

1. (Currently Amended) A secure method of transmitting a message between a ' 
sender node and a recipient node within a network collaboration group, the sender node 
and the recipient node sharing a secret encryption key and an expected nonce value 
comprising: 

generating a new nonce value known to the sender node; 
encrypting the message, the expected nonce value and the new nonce value, 
using the encryption key, to create an encrypted message; and 

transmitting the encrypted message from the sender node to the recipient node; 

Ml IVf 

verifying, wherein th e encrypted message mav be verified by the recipient 
nodeff,]] by decrypting the en crypted message and confirming that the encrypted 
message includes the expected nonce valu e) where tho oxpoot e d nonoo value and tho 
new nonoo va l uo aro rocovorablo from tho onoryptod mocoogo uoing only knowlodgo 
poooooood by tho rooip i ont nodo prior to rcooipt of tho onoryptod moooago . 

2. (Previously Presented) The method of claim 1 . further comprising: 
generating a second new nonce value, known to the recipient node; 
transmitting a secure response from the recipient node to the sender node by 

repeating the method of claim 1. but this time using the second new nonce value in 
place of the new nonce value and using the new nonce value in place of the expected 
nonce value. 

3. (Previously Presented) The method of claim 2, wherein the method is further 
repeated for one or more subsequent rounds of secure communication between the 
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sender node and the recipient node, such that for each round the new nonce value of 
the previous message is used as the expected nonce value for the current message. 

4. (Original) The method of claim 1, wherein the network collaboration group is a 
virtual private network. 

5. (Previously Presented) The method of claim 1 . wherein the sender node is a key 
managing master node and the recipient node is a member node of the collaboration 
group. 

6. (Previously Presented) The method of claim 1. wherein the recipient node is a 
key-managing master node and the sender node is a member node of the collaboration 
group. 

7. (Previously Presented) The method of claim 1. wherein one of the sender node 
and the recipient node is a key-managing master node that performs an authentication 
process for opening a collaboration group session with a new member node, the new 
member node being the other of the sender node and the recipient node. 

8. (Previously Presented) The method of claim 7, wherein the method is used with 
the new member node as the sender node and the master node as the recipient node, 
in order to initiate the authentication process. 

9. (Previously Presented) The method of claim 7, wherein the method is used with 
the master node as the sender node in order to distribute a session encryption key from 
the master node to the new member node. 

10. (Previously Presented) The method of claim 9. wherein a long-term password 
key is used as the encryption key in order to perform the authentication process, and 
the session key is used as the encryption key for one or more subsequent 
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communications between the new member node and the master node. 

11. (Previously Presented) The method of claim 10, wherein the session key is 
revoked by the master node upon receipt of a termination message from the new 
member node. 

12. (Original) The method of claim 1, further including receiving a copy of a prior 
message being transmitted as a replay attack, and rejecting the replay as illicit at least 
in part because the replay does not contain the current expected nonce value. 

13. (Currently Amended) A system for managing communications within a network 
collaboration group, comprising: 

means for generating a new nonce value; 

means for incorporating a message, an expected nonce value and the new 
nonce value in an encrypted message; 

means for transmitting the encrypted message from a sender node of the group 
to a recipient node of the group; and 

means for verifying, by the recipient node, that the encrypted message includes 
the expected nonce value, whoro the oxpoctod nonoo va l ue and tho now nonco value 
aro rocovorab l o from tho oncryptod mocoago uo i ng only know l odgo pooocosod by tho 
r e c i pient node prior to receipt of tho encrypted moooago wherein the expected nonce 
value is re coverable bv decrypting the encrypted message . 

14. (Previously Presented) The system of claim 13, wherein the means for 
incorporating are operable to use the new nonce value, contained in a most recent 
previous message from the sender node to the recipient node, as the expected nonce 
value in a current message from the recipient node to the sender node. 

15. (Original) The system of daim 13, wherein the network collaboration group is a 
virtual private network. 
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16. (Currently Amended) A data-carrying signal for transmitting information securely 
between a master node and a member node of a network collaboration group, the 
signal being encrypted using an encryption key shared by the master node and the 
member node, the signal comprising: 

the information to be transmitted; 

an expected nonce value known to the master node and the member node; and 
a new nonce value, different than the expected nonce, provided by a sender of 
the signal, the sender being one of the master node and the member node, where the 
expected nonce value and the new nonce value are recoverable from the signal using 
only know l odgo poccocood by a rocipiont nodo prior to onoryption of tho o i gna l j tho 
recipient nodo boing ono of the mactor nodo and tho mombor nodo that d i d not se nd tho 
signal bv decrypting the signal . 

17. (Previously Presented) The data-carrying signal of claim 16. wherein the 
expected nonce value in the current transmission is obtained from the new nonce value 
contained in a most recent previous transmission from the sender node to the recipient 
node. 

18. (Currently Amended) A method for transmitting secure messages between a 
master node and a member node of a network collaboration group comprising: 

ffencrypting-messagesJl encrypting messages using a key shared by the master 
node and the member node, so as to protect confidentiality of the message; and 

embedding a plurality of updated nonce values within said encrypted messages 
so as to provide verifiable integrity, authenticity, and freshness for each of said 
messages, where said plurality of updated nonce values are recoverable from the 
messages bv decrypting the messages ucfng on l y knowlodgo poeoooood by tho 
rocipiont nodo prior to eaid onorypting, caid rocip i ont nodo being ono of tho mactor nodo 
and the m e mbor nod e that rece i v e s tho onorypted messages . 
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